<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: aterm</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2021-20710: Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to </title><link>https://patchthecve.com/cve/CVE-2021-20710.html</link><guid>https://patchthecve.com/cve/CVE-2021-20710.html</guid><pubDate>Wed, 17 Jun 2026 03:34:17 +0000</pubDate><description>MEDIUM 6.1: Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</description></item><item><title>CVE-2021-20622: Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmwa</title><link>https://patchthecve.com/cve/CVE-2021-20622.html</link><guid>https://patchthecve.com/cve/CVE-2021-20622.html</guid><pubDate>Wed, 17 Jun 2026 03:34:08 +0000</pubDate><description>MEDIUM 6.1: Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</description></item><item><title>CVE-2021-20621: Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2</title><link>https://patchthecve.com/cve/CVE-2021-20621.html</link><guid>https://patchthecve.com/cve/CVE-2021-20621.html</guid><pubDate>Wed, 17 Jun 2026 03:34:08 +0000</pubDate><description>HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.</description></item><item><title>CVE-2021-20620: Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to i</title><link>https://patchthecve.com/cve/CVE-2021-20620.html</link><guid>https://patchthecve.com/cve/CVE-2021-20620.html</guid><pubDate>Wed, 17 Jun 2026 03:34:08 +0000</pubDate><description>MEDIUM 6.1: Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.</description></item><item><title>CVE-2017-12575: An issue was discovered on the NEC Aterm WG2600HP2 1.0.2</title><link>https://patchthecve.com/cve/CVE-2017-12575.html</link><guid>https://patchthecve.com/cve/CVE-2017-12575.html</guid><pubDate>Wed, 17 Jun 2026 01:03:31 +0000</pubDate><description>HIGH 7.5: An issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service APIs for access to and setup of the configuration. Some APIs don&#x27;t require authentication. An attacker could exploit this vulnerability by sending a crafted HTTP request to retrieve DHCP clients, firmware v</description></item><item><title>CVE-2016-1168: Cross-site request forgery (CSRF) vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier </title><link>https://patchthecve.com/cve/CVE-2016-1168.html</link><guid>https://patchthecve.com/cve/CVE-2016-1168.html</guid><pubDate>Wed, 17 Jun 2026 00:41:24 +0000</pubDate><description>HIGH 8.8: Cross-site request forgery (CSRF) vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users.</description></item><item><title>CVE-2016-1167: Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack</title><link>https://patchthecve.com/cve/CVE-2016-1167.html</link><guid>https://patchthecve.com/cve/CVE-2016-1167.html</guid><pubDate>Wed, 17 Jun 2026 00:41:24 +0000</pubDate><description>HIGH 8.8: Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users.</description></item></channel></rss>